Network misconfigurations

Elastic Load Balancer (ELB) allows ingress access to LDAP SSL port 636


LDAP (Lightweight Directory Access Protocol) is used to connect to directory services for user authentication and retrieval. Allowing inbound traffic from external IPv4 addresses to LDAP ports can lead to attacks like DoS, Brute Force, Smurf and reconnaissance. It is a best practice to restrict the inbound traffic from specific addresses.